This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CTII/DV8g2xvgpIedj0C6EwNa-DstT7g.roa
File:                     DV8g2xvgpIedj0C6EwNa-DstT7g.roa (raw, json)
Hash identifier:          MOWThPkISGRedNwWYHoaQ+JiVzX0FeBobrkY5VWURN0=
Subject key identifier:   0D:5F:20:DB:1B:E0:A4:87:9D:8F:40:BA:13:03:5A:F8:3B:2D:4F:B8
Certificate issuer:       /CN=FBD3AC9FC44C3DD2AB7B5D20BC158C82D83D260A
Certificate serial:       13F4
Authority key identifier: FB:D3:AC:9F:C4:4C:3D:D2:AB:7B:5D:20:BC:15:8C:82:D8:3D:26:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-9Osn8RMPdKre10gvBWMgtg9Jgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/DV8g2xvgpIedj0C6EwNa-DstT7g.roa
Signing time:             Mon 15 Dec 2025 01:24:11 +0000
ROA not before:           Mon 15 Dec 2025 01:24:11 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     133948
IP address blocks:        103.130.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/-9Osn8RMPdKre10gvBWMgtg9Jgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Dec 2025 21:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5108 (0x13f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBD3AC9FC44C3DD2AB7B5D20BC158C82D83D260A
        Validity
            Not Before: Dec 15 01:24:11 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=0D5F20DB1BE0A4879D8F40BA13035AF83B2D4FB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:9f:3b:bf:f4:50:bd:05:0c:ca:57:54:31:
                    02:20:44:91:74:45:39:06:23:00:6a:68:95:8e:b3:
                    4c:f4:cb:cc:8f:25:41:cf:bc:32:c2:d1:92:4a:d3:
                    fc:a6:33:42:5a:ba:07:18:9f:ee:35:7d:3b:03:92:
                    81:11:e0:44:f2:e7:c8:4a:22:a0:2a:e6:8a:ff:55:
                    81:33:f9:0a:da:f2:9c:26:e2:b1:9a:49:2b:9b:d0:
                    3b:47:eb:63:a0:f7:46:91:ea:a2:bc:03:e7:10:57:
                    d0:74:15:e8:d3:3a:36:10:4f:f5:56:fd:01:9f:4c:
                    07:00:14:23:19:34:f6:cd:c2:c7:ff:88:71:56:9b:
                    28:a3:3c:fa:6e:3a:2f:38:07:e9:06:e1:97:dd:2e:
                    09:d5:29:d2:f4:66:1d:bc:c3:60:44:fb:a8:25:de:
                    d6:d6:53:da:46:10:ea:6d:ed:2a:98:f3:fa:81:58:
                    2a:dc:c1:0d:4c:85:09:7b:13:5b:05:3b:75:b6:30:
                    d0:cc:3d:e8:53:a6:d9:a6:60:67:c7:ae:e9:ae:16:
                    fb:53:7f:2e:de:74:60:83:a3:55:be:c7:28:9e:8c:
                    f2:fd:25:48:b7:ac:d5:77:2f:32:d8:ce:6d:cb:a3:
                    f2:7d:66:16:09:88:21:86:4e:69:4b:c7:32:36:b1:
                    9a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5F:20:DB:1B:E0:A4:87:9D:8F:40:BA:13:03:5A:F8:3B:2D:4F:B8
            X509v3 Authority Key Identifier:
                keyid:FB:D3:AC:9F:C4:4C:3D:D2:AB:7B:5D:20:BC:15:8C:82:D8:3D:26:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-9Osn8RMPdKre10gvBWMgtg9Jgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/DV8g2xvgpIedj0C6EwNa-DstT7g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:ae:ce:9f:28:b1:60:30:b3:22:c1:f8:90:67:22:fd:65:bb:
         ff:68:cc:ae:fe:ec:87:94:4c:cd:1e:86:df:77:36:62:38:c2:
         1d:6e:e5:10:9a:96:f2:ca:35:db:fb:ae:11:0d:79:1f:e4:1d:
         9d:36:89:02:06:5a:98:6c:3d:08:0b:fd:0d:e9:b8:aa:68:cd:
         9f:c1:14:74:3b:0f:7b:d2:bf:5a:6e:1b:92:52:7f:65:5b:53:
         08:65:8a:1f:b1:aa:d3:c3:89:59:67:69:93:dc:2f:a3:d2:53:
         14:77:20:01:fd:0b:db:75:2a:53:0f:4d:50:eb:b0:f6:50:ee:
         e4:68:d3:1d:0d:60:40:55:21:2c:52:48:63:c8:a1:95:6d:03:
         b0:76:ad:0e:4e:cc:09:83:4a:54:ac:35:93:4d:3c:8d:8d:60:
         99:a4:ca:cd:6b:f7:8c:e6:9d:56:6d:f7:ef:2a:f4:a9:88:b5:
         74:d3:d4:ca:ec:e8:d6:5e:e7:45:12:f5:56:72:e1:72:97:6c:
         2c:e7:5d:ba:05:32:dd:cd:8f:41:2f:8c:29:81:d5:4d:b8:fd:
         12:01:5d:47:59:0c:fa:0a:d1:5e:d4:43:a6:57:31:3d:66:6e:
         b3:b8:d7:38:b8:46:b1:f1:e5:f1:31:8c:71:c7:48:d6:52:55:
         a7:9e:4d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:47:15 2025 by rpki-client